CVE-2006-3584

CVE Database · CVE-2006-3584

CVE-2006-3584

· N/AModified

CVSS v3.1

N/A

EPSS

1.48%

Published

Aug 8, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.

Affected Products (2)

jetbox · jetbox_cmsvulnerable

References (10)

http://secunia.com/advisories/20889

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Vendor Advisory

http://securityreason.com/securityalert/1339

http://www.securityfocus.com/archive/1/441980/100/0/threaded

http://www.securityfocus.com/bid/19303

http://secunia.com/advisories/20889

Vendor Advisory

http://secunia.com/secunia_research/2006-57/advisory/

Vendor Advisory

http://securityreason.com/securityalert/1339

http://www.securityfocus.com/archive/1/441980/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs